{ "data": { "a": { "slug": "boldsign", "name": "BoldSign", "vendor": "Syncfusion, Inc.", "vendorUrl": "https://boldsign.com", "kind": "http-api", "category": "e-signatures", "summary": "BoldSign is Syncfusion's electronic signature service. Its REST API sends documents for signature from files or templates, embeds signing and requesting in other products, manages templates, users and teams, and reports events by webhook, with a hosted MCP server.", "url": "https://www.anchorterminal.com/tools/boldsign", "markdownUrl": "https://www.anchorterminal.com/tools/boldsign.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/boldsign.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/boldsign.json", "dns": "boldsign.grade.anchorterminal.com", "repo": "https://github.com/boldsign/boldsign-node-sdk", "license": "Proprietary hosted service under the BoldSign Terms of Use. The five official SDKs and the deprecated local MCP package on GitHub are MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.boldsign.com/v1", "packages": [ { "registry": "npm", "name": "boldsign" }, { "registry": "pypi", "name": "boldsign" }, { "registry": "nuget", "name": "BoldSign.Api" } ], "auth": "mixed", "authNotes": "An API key in the X-API-KEY header, generated in the web app under API, API Key, with all scopes and an optional expiry date, at most four keys per account and two per environment (Live or Sandbox). Or OAuth 2.0 at account.boldsign.com with authorisation code and PKCE, client credentials and refresh tokens, and 20 scopes such as BoldSign.Documents.Create and BoldSign.Templates.Read. The hosted MCP server takes the same key as X-API-Key or OAuth sign-in from Claude Web and ChatGPT. Keys are self-serve; live API access needs the Enterprise API plan.", "pricing": "freemium", "pricingNotes": "The free sandbox gives full API access with no card. Documents are watermarked and deleted after 14 days. Live API access is the Enterprise API plan from $30 a month with 40 envelopes and $0.75 per additional envelope, with a 30-day trial and no card. Add-ons are priced per unit (bulk send $0.25 an envelope, SMS $0.20, ID verification $2, KBA $1.50 an attempt, QES $3 a signing attempt). Live MCP use needs the Enterprise API plan at the normal envelope charge (https://boldsign.com/electronic-signature-pricing/, checked 2026-11-03).", "priceSummary": "$30 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the Swagger file, the pricing page or the MCP docs (checked 2026-11-03). Plans are paid by card through Stripe in the web app.", "endpoints": [] }, "toolCount": 14, "popularity": { "githubStars": 1, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://developers.boldsign.com/", "llmsTxt": "https://developers.boldsign.com/llms.txt", "openapi": "https://api.boldsign.com/swagger/v1/swagger.json", "capabilities": [ "esign.send", "esign.templates", "esign.embed", "esign.status" ], "tags": [ "official", "hosted", "closed-source", "api-key", "oauth", "openapi", "llms-txt", "mcp", "remote-mcp", "webhooks", "sandbox", "free-tier", "freemium", "eu-region", "status-page", "security-txt", "soc2", "python", "typescript", "dotnet", "java", "php" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 70.3, "grade": "BB", "agentReady": true, "rank": 190, "ranked": true, "rankOf": 1349, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 62, "maintenance": 78, "payments": 40, "reliability": 84, "schema": 85, "security": 63, "transparency": 77 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": 0, "verdict": "A public OpenAPI file, llms.txt, 20 OAuth scopes, published rate limits, a free sandbox and a clean 90-day status history. API keys carry every scope, there are no idempotency keys, the 2,000-an-hour account limit is low for bulk work, and the hosted MCP server's 14 tools include sending and revoking with no confirmation step of their own.", "bestFor": "A product team embedding signing, requesting and templates at a per-envelope price with regional hosting in the US, EU, Canada or Australia, and an agent that sends from templates and tracks status through the hosted MCP server.", "strengths": [ "OpenAPI 3.0.4 file with 87 operations, llms.txt and a Markdown twin of every docs page", "OAuth 2.0 with authorisation code and PKCE, client credentials, single-use refresh tokens and 20 scopes split by resource and action", "Rate limits published per account, 2,000 requests an hour live and 50 in the sandbox, with usage headers", "Free sandbox with full API access and no card, and live API from $30 a month with $0.75 per extra envelope", "No incident on status.boldsign.com between 5 August and 3 November 2026, with components per region", "Dated API changelog since April 2021 with breaking changes labelled, and five official SDKs updated in August to October 2026" ], "weaknesses": [ "API keys carry every scope and the docs say that is not customisable; only OAuth apps get narrower scopes, and there is no Documents.Read scope", "No idempotency keys, and no Retry-After documented for the 429", "64 of the 87 operation descriptions in the Swagger file are under 40 characters, and the file carries no examples", "The hosted MCP server's tool schemas are not published, it sends, reminds and revokes with no built-in confirmation, and it is not in the official MCP registry", "No SLA document was found. security.txt advertises a 99.999 per cent uptime SLA and the terms disclaim uninterrupted service" ], "agentNotes": [ "Send `X-API-KEY: $BOLDSIGN_API_KEY` to the regional base URL (api.boldsign.com, api-eu, api-ca or api-au); a key from one region fails on another, and the MCP endpoint must match too", "Build against a Sandbox key first. Sandbox documents are watermarked and deleted after 14 days, and the sandbox allows only 50 requests an hour", "Stay under 2,000 requests an hour per account in production and use webhooks instead of polling `document/properties`; on a 429 wait for the window to reset", "Don't retry a timed-out `document/send` blindly. There is no idempotency key, so list documents by title or search before sending again", "Verify `X-BoldSign-Signature` (HMAC-SHA256 with the endpoint secret) on every webhook before acting on its payload", "On the MCP server, start with `list_templates` and `get_document_properties`, and confirm with the person before `send_document_from_template`, `send_reminder_for_document_sign` or `revoke_document`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.3 } ], "editorialScores": { "ergonomics": 62, "maintenance": 78, "payments": 40, "reliability": 84, "schema": 85, "security": 63, "transparency": 59 }, "provenanceScore": 95, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install boldsign", "http": "curl -H \"X-API-KEY: $BOLDSIGN_API_KEY\" \"https://api.boldsign.com/v1/document/list?Page=1\u0026PageSize=10\"", "claudeCode": "claude mcp add boldsign --transport http https://mcp.boldsign.com/mcp --header \"X-API-Key: $BOLDSIGN_API_KEY\"", "config": { "mcpServers": { "boldsign": { "headers": { "X-API-Key": "${BOLDSIGN_API_KEY}" }, "type": "http", "url": "https://mcp.boldsign.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/esign.send", "tool": "https://letme.dev/boldsign" }, "area": "business", "unitPrices": [ { "item": "Enterprise API plan", "unit": "month", "usd": 30, "note": "starting price with 40 envelopes and two application users" }, { "item": "Additional envelope, Enterprise API", "unit": "tx", "usd": 0.75, "note": "one envelope can hold several files, signers and CCs" }, { "item": "Bulk send or bulk link envelope", "unit": "tx", "usd": 0.25 }, { "item": "SMS envelope", "unit": "message", "usd": 0.2, "note": "WhatsApp $0.10 a message" }, { "item": "ID verification", "unit": "tx", "usd": 2, "note": "KBA $1.50 an attempt, QES $3 a signing attempt" } ], "provenance": { "legalEntity": "Syncfusion, Inc.", "domain": "boldsign.com", "domainRegistered": "2013-12-20", "endpointOnVendorDomain": true, "terms": "https://boldsign.com/terms-of-use/", "privacy": "https://boldsign.com/privacy-policy/", "statusPage": "https://status.boldsign.com/", "changelog": "https://developers.boldsign.com/api-overview/changelog", "securityTxt": "valid", "checked": "2026-11-03", "notes": [ "The Terms of Use (effective February 2025) name Syncfusion, Inc., a Delaware corporation in Morrisville, North Carolina, under North Carolina law with AAA arbitration in Raleigh. The privacy policy (effective July 2026) is Syncfusion-wide and covers BoldSign, BoldDesk, Bold BI and Bold Reports.", "The terms forbid robots, spiders, scrapers or other automated means to access or monitor BoldSign other than the Syncfusion-provided API, and forbid using the product to train or improve machine learning or AI algorithms. Recorded as a fact.", "boldsign.com/robots.txt disallows /responsible-disclosure/ and cdn-cgi paths with a crawl delay of 1 second and Content-Signal ai-train=yes, search=yes, ai-input=yes, so the responsible disclosure page was not read. developers.boldsign.com/robots.txt disallows /moreresults and /search. status.boldsign.com disallows /api/ and /embed/.", "boldsign.com/.well-known/security.txt is valid until 18 August 2027 with security@boldsign.com and a policy link to boldsign.com/security-policy/. Its comments claim SOC 2 Type 2, GDPR and a 99.999 per cent uptime SLA.", "The API answers on api.boldsign.com and regional subdomains, OAuth on account.boldsign.com and MCP on mcp.boldsign.com, all vendor subdomains.", "RDAP gives boldsign.com a registration date of 20 December 2013." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/boldsign.json", "live": { "slug": "boldsign", "probe": { "target": "https://api.boldsign.com/v1", "method": "get", "lastAt": "2026-11-04T20:46:36.22824902Z", "lastOk": false, "lastStatus": 500, "lastMs": 204, "lastNote": "server error", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 55, "samples30d": 55, "days": [ { "date": "2026-11-04", "probes": 55, "ok": 0 } ], "outages": [ { "start": "2026-11-04T15:25:13.380401793Z", "end": "0001-01-01T00:00:00Z", "note": "HTTP 500 server error" } ] }, "vendorStatus": { "page": "https://status.boldsign.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T20:38:43.453813971Z" }, "versions": [ { "registry": "npm", "name": "boldsign", "version": "3.3.4", "seenAt": "2026-11-04T20:03:22.635714892Z" }, { "registry": "pypi", "name": "boldsign", "version": "3.3.4", "released": "2026-10-16", "seenAt": "2026-11-04T20:03:23.457188444Z" } ], "githubStars": 1, "npmWeekly": 36472, "pypiWeekly": 14652, "securityTxt": { "url": "https://boldsign.com/.well-known/security.txt", "state": "valid", "expires": "2027-08-18T00:00:00Z", "checkedAt": "2026-11-04T15:54:30.755542398Z" }, "updatedAt": "2026-11-04T20:46:36.22824902Z" } }, "answer": "BoldSign scores 70.3 (BB) on agent readiness against airSlate SignNow's 66.3 (B), and leads in 5 of 7 scored categories. airSlate SignNow leads on reliability.", "b": { "slug": "signnow", "name": "airSlate SignNow", "vendor": "airSlate, Inc.", "vendorUrl": "https://www.signnow.com", "kind": "http-api", "category": "e-signatures", "summary": "airSlate SignNow is an e-signature service. Its REST API prepares documents from templates, sends signature invites, embeds signing in other apps and reports status through webhooks. A hosted MCP server gives AI agents 20 documented tools over the same account.", "url": "https://www.anchorterminal.com/tools/signnow", "markdownUrl": "https://www.anchorterminal.com/tools/signnow.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/signnow.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/signnow.json", "dns": "signnow.grade.anchorterminal.com", "repo": "https://github.com/signnow/sn-mcp-server", "license": "Proprietary service under the SignNow Terms of Service. The MCP server and the SDKs on GitHub are MIT", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://api.signnow.com", "packages": [ { "registry": "pypi", "name": "signnow-mcp-server" }, { "registry": "npm", "name": "@signnow/api-client" }, { "registry": "pypi", "name": "signnow-python-sdk" } ], "auth": "mixed", "authNotes": "Access is self-serve. A free developer account creates an application and an API key in the API dashboard, with no app review. The API takes a Bearer API key (no expiry, all API requests) or an OAuth 2.0 access token from POST /oauth2/token using the password, refresh_token or authorization_code grant. The `scope` parameter limits a token to URL patterns such as `document/* GET/user`, and the default `*` allows every action. The hosted MCP server uses OAuth with PKCE and dynamic client registration, and the local package takes an API key or account email, password and Basic token.", "pricing": "usage", "pricingNotes": "Paid API plans are priced per signature invite, from $2 per invite at 500 invites to $1.20 at 5,000 per the developers page. An agent can start without a contract. Development mode is free on the production host, with 500 requests an hour and up to 500 invites, and documents carry a Development watermark. The developers page also advertises 250 free signature invites. Live mode needs a paid API plan, an API free trial or a site licence. The full plan table is a JavaScript page we couldn't read (checked 2026-10-07).", "priceSummary": "$2 / tx", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI spec, the developers page or the MCP server repository (checked 2026-10-07).", "endpoints": [] }, "toolCount": 21, "popularity": { "githubStars": 8, "npmWeekly": 7740, "pypiWeekly": 5269, "asOf": "2026-10-07" }, "docsUrl": "https://docs.signnow.com", "llmsTxt": "https://docs.signnow.com/llms.txt", "openapi": "https://docs.signnow.com/api/openapi.json", "registryName": "io.github.signnow/sn-mcp-server", "capabilities": [ "esign.send", "esign.templates", "esign.embed", "esign.status", "contracts.generate", "pdf.forms" ], "tags": [ "hosted", "usage-based", "free-tier", "sandbox", "mcp", "oauth", "api-key", "openapi", "llms-txt", "webhooks", "php", "python", "typescript", "dotnet", "java", "status-page", "sla", "bug-bounty", "soc2" ], "lastRelease": "2026-09-03", "graded": true, "anchor": { "graded": true, "score": 66.3, "grade": "B", "agentReady": false, "rank": 340, "ranked": true, "rankOf": 1349, "categoryRank": 3, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 57, "payments": 35, "reliability": 93, "schema": 81, "security": 62, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -3, "negativeNotes": [ "2026-07-08. Until release v2.7.0 the MCP server's signing links carried the user's raw SignNow access token in the URL query string, where it could leak through logs, browser history and Referer headers. The fix and a regression test are in pull request 65, but no advisory was found in the repository, its SECURITY.md or OSV, so this is a released fix of the package's own security flaw with no advisory, 3 points, as medplum and spree-commerce took for released fixes without an advisory. https://github.com/signnow/sn-mcp-server/pull/65" ], "verdict": "The REST API has a public OpenAPI 3.0 spec with 354 operations, Markdown docs, a free Development mode with 500 invites and a hosted MCP server with OAuth. API keys don't expire and carry full account access, no idempotency keys were found, and the MCP server's GitHub repository was archived when checked on 7 October 2026.", "bestFor": "An agent that sends agreements from templates, embeds signing in another product or tracks invites, and teams that want per-invite pricing with a free test mode.", "strengths": [ "Public OpenAPI 3.0.3 spec with 354 operations, 342 of them with examples, plus llms.txt and a Markdown copy of every docs page", "Development mode is free on the production host, with 500 requests an hour and up to 500 signature invites without a plan", "Hosted MCP server at mcp-server.signnow.com/mcp with OAuth, PKCE and dynamic client registration, and read-only and destructive hints on its tools", "Webhooks carry an HMAC SHA-256 signature header and a documented retry schedule, and the API dashboard logs every request and delivery attempt", "Status page shows three minor incidents since April 2026, none on the API component, and a 99.9 per cent SLA with credits is published" ], "weaknesses": [ "API keys don't expire and work for all API requests. Narrower access needs an OAuth token requested with a URL-pattern scope", "No idempotency key was found in the spec or guides, and each signature invite sent is charged", "The sn-mcp-server GitHub repository was archived when checked on 7 October 2026, while the docs still send issue reports there", "Numeric error codes aren't unique. The docs tell callers to identify a problem by its message text", "The API plan table is a JavaScript page we couldn't read. Only the per-invite range on the developers page is public text" ], "agentNotes": [ "Call https://api.signnow.com with `Authorization: Bearer \u003cAPI key or access token\u003e`. Development and Live share this host, and Development documents carry a watermark", "Request OAuth tokens with a narrow `scope` such as `document/* GET/user`. The default `*` grants every API action", "Read `X-RateLimit-Remaining` and `X-RateLimit-Reset` on each response. The limit is 500 requests an hour in Development and 1,000 in Live, and 429 has no Retry-After", "Check invite status before resending. No idempotency key exists, and a repeated invite call counts as another charged invite", "Set `secret_key` when creating an event subscription and verify `X-SignNow-Signature` (HMAC SHA-256 of the body) on every callback" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 66.3 } ], "editorialScores": { "ergonomics": 66, "maintenance": 57, "payments": 35, "reliability": 93, "schema": 81, "security": 62, "transparency": 62 }, "provenanceScore": 87, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "uvx --from signnow-mcp-server sn-mcp serve", "http": "curl --request POST \\\n --url https://api.signnow.com/v2/documents/url \\\n --header 'Authorization: Bearer {{your_api_key}}' \\\n --header 'Content-Type: application/json' \\\n --data '{\"url\": \"https://www.signnow.com/whitepapers/signnow_api_test_invite.pdf\"}'", "config": { "mcpServers": { "signnow-local": { "args": [ "--from", "signnow-mcp-server", "sn-mcp", "serve" ], "command": "uvx", "env": { "SIGNNOW_API_KEY": "your-api-key" } } } } }, "letme": { "capability": "https://letme.dev/esign.send", "tool": "https://letme.dev/signnow" }, "area": "business", "unitPrices": [ { "item": "Signature invite, 500-invite plan", "unit": "tx", "usd": 2, "note": "starting price per the developers page on 2026-10-07" }, { "item": "Signature invite, 5,000-invite plan", "unit": "tx", "usd": 1.2, "note": "per the developers page on 2026-10-07" }, { "item": "Development mode", "unit": "tx", "usd": 0, "note": "up to 500 invites without a plan, watermarked" } ], "provenance": { "legalEntity": "airSlate, Inc.", "domain": "signnow.com", "domainRegistered": "2001-04-05", "endpointOnVendorDomain": true, "terms": "https://legal.signnow.com/terms", "privacy": "https://legal.signnow.com/privacy-notice", "statusPage": "https://status.signnow.com", "changelog": "https://docs.signnow.com/docs/signnow-api-changelog", "securityTxt": "none", "checked": "2026-10-07", "notes": [ "The privacy notice (last updated 12 August 2026) names airSlate, Inc., 17 Station Street, Ste. 203, Brookline, MA 02445. The contracting entity table (last updated 1 October 2026) lists seven airSlate companies, and the one that applies depends on the service, location and payment method.", "The API answers at api.signnow.com and the hosted MCP server at mcp-server.signnow.com, both signnow.com subdomains.", "www.signnow.com/.well-known/security.txt returns 404. Vulnerability reports go through the airSlate bug bounty programme on HackerOne, which needs an invitation requested by email (policy last updated 7 October 2025).", "The terms of service were last updated 2 March 2023, the SLA 11 January 2023 and the DPA 1 July 2025.", "RDAP for signnow.com gives a registration date of 2001-04-05 and GoDaddy.com, LLC as registrar." ], "score": 87 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/signnow.json", "live": { "slug": "signnow", "probe": { "target": "https://api.signnow.com", "method": "get", "lastAt": "2026-11-04T20:47:14.749662065Z", "lastOk": true, "lastStatus": 404, "lastMs": 265, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 221, "p95ms24h": 443, "samples24h": 246, "samples30d": 6818, "days": [ { "date": "2026-10-08", "probes": 93, "ok": 93 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 214, "ok": 214 } ] }, "vendorStatus": { "page": "https://status.signnow.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T20:39:56.625121427Z" }, "versions": [ { "registry": "github", "name": "signnow/sn-mcp-server", "version": "v3.1.0", "released": "2026-07-27", "seenAt": "2026-11-03T20:58:13.628767523Z" }, { "registry": "mcp-registry", "name": "io.github.signnow/sn-mcp-server", "version": "0.3.1", "seenAt": "2026-11-04T17:11:44.552009456Z" }, { "registry": "npm", "name": "@signnow/api-client", "version": "3.2.0", "seenAt": "2026-11-03T20:58:11.744655347Z" }, { "registry": "pypi", "name": "signnow-mcp-server", "version": "3.1.0", "released": "2026-07-27", "seenAt": "2026-11-03T20:58:11.538769254Z" }, { "registry": "pypi", "name": "signnow-python-sdk", "version": "3.0.0", "released": "2026-04-22", "seenAt": "2026-11-03T20:58:12.687109765Z" } ], "githubStars": 8, "npmWeekly": 10062, "pypiWeekly": 116, "securityTxt": { "url": "https://signnow.com/.well-known/security.txt", "state": "unknown", "checkedAt": "2026-11-04T15:54:11.11434624Z" }, "llmsTxt": { "url": "https://docs.signnow.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-04T15:24:13.494549699Z" }, "domain": { "domain": "signnow.com", "registered": "2001-04-05", "source": "https://rdap.verisign.com/com/v1/domain/signnow.com", "checkedAt": "2026-11-01T14:08:10.455068937Z" }, "pages": [ { "url": "https://docs.signnow.com/docs/signnow-api-changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-04T08:22:25.081256714Z", "changedAt": "2026-11-04T08:22:25.081256714Z", "fingerprint": "d892763c76ee" }, { "url": "https://legal.signnow.com/privacy-notice", "kind": "privacy", "status": 200, "checkedAt": "2026-11-04T08:26:58.067275159Z", "changedAt": "2026-10-14T20:44:09.879741084Z", "fingerprint": "b72ea7f3eb61" }, { "url": "https://legal.signnow.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-04T08:27:00.354494555Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "ab6de5f8c31e" } ], "github": { "repo": "signnow/sn-mcp-server", "checkedAt": "2026-11-02T09:25:52.142338756Z", "stars": 8, "archived": true, "issuesEnabled": true, "pushedAt": "2026-07-27T14:15:30Z", "openIssues": 0, "openPRs": 1, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 0, "ci": { "branch": "main", "runs": 19, "success": 17, "failure": 2, "other": 0, "latest": "failure", "latestAt": "2026-07-27T14:14:25Z" }, "replies": { "sampled": 1, "unanswered": 0, "medianDays": 71.1 } }, "updatedAt": "2026-11-04T20:47:14.749662065Z" } }, "edges": [ { "by": 21, "category": "maintenance", "leads": "boldsign", "name": "Maintenance \u0026 community", "reasons": { "a": "Read as a closed service. The API changelog's newest entry is 16 October 2026, and the PHP SDK repository was pushed the same day, Java and Python on 13 October (30). Changelog entries on 13 August, 19 August, 7 September, 23 September, 8 October and 16 October 2026 (20). Support site, knowledge base and support@boldsign.com, with a public changelog. GitHub issues on the SDK repositories were not read (8 of 15). Five official SDKs, Node at 3.3.4 since August 2026. The hosted MCP server is not in the official MCP registry (15). The Node SDK clone shows no CI workflow and the deprecated MCP package stopped at 0.0.5 (5 of 10). 30 + 20 + 8 + 15 + 5 = 78.", "b": "The API changelog's newest entry is still September 2026, dated by month only, and the PHP SDK v3.5.4 (3 September 2026, a code change) is 59 days old, so both sit in the 90-day band (20). In the 90 days to 1 November the changelog has entries for August and September, and v3.5.4 counts half as an SDK release, which falls short of three, so half the line (10). Closed service with a monthly changelog and API support at api@signnow.com. The MCP repository that the docs name for issue reports was archived when checked on 7 October and has no commit after 27 July (8). SDKs for five languages, with PHP in September 2026, Python in April and Node in March per the 7 October check. The official MCP registry still lists io.github.signnow/sn-mcp-server at 0.3.1 while the newest tag is v3.1.0 (13). The MCP repository has CI with ruff, mypy and pytest and 60 test files, and it was archived when checked on 7 October (6)." }, "scores": { "a": 78, "b": 57 } }, { "by": 9, "category": "reliability", "leads": "signnow", "name": "Reliability", "reasons": { "a": "Read with the hosted lines and scored on the REST API v1, the surface the SDKs and the hosted MCP server call. status.boldsign.com on Atlassian Statuspage has Web App and API components for Global, Europe, Canada and Australia plus Docs, with 90-day uptime and an incident history (20). The history feed, read on 3 November 2026, lists four one-hour scheduled maintenances between 19 and 27 September and no incident after a 20-minute partial disruption on 21 July 2026, so the 90 days from 5 August are clean (30). Rate limits are published per account, 2,000 requests an hour live and 50 an hour in the sandbox (15). The rate-limit page says 429 is returned with messages and usage is tracked in response headers, and the guide recommends webhooks over polling. No Retry-After is documented and there are no idempotency keys (6 of 15). No SLA document was found. security.txt advertises a 99.999 per cent uptime SLA, the terms disclaim uninterrupted service and refer to a support SLA available on request (3 of 10). v1 is the stable version with beta endpoints under v1-beta (10). 20 + 30 + 15 + 6 + 3 + 10 = 84.", "b": "Graded as a hosted API. Statuspage at status.signnow.com with six components including API (20). The history feed shows one incident in the 90 days to 1 November, a minor one on 3 September 2026 that made the SignNow University site unavailable for eight minutes, and none on the API component. The 17 October maintenance window of up to 15 minutes was announced on 2 October (30). Limits are published with numbers, 500 requests an hour in Development and 1,000 in Live (15). 429 is documented with X-RateLimit-Limit, Remaining and Reset headers and advice to back off exponentially. No Retry-After header and no idempotency key were found, and sending an invite is a charged write (8). The SLA commits to commercially reasonable efforts for 99.9 per cent monthly uptime with credits of 10 or 30 per cent (10). The REST API is generally available (10)." }, "scores": { "a": 84, "b": 93 } }, { "by": 5, "category": "payments", "leads": "boldsign", "name": "Payments \u0026 pricing", "reasons": { "a": "Read with the hosted rubric. No x402, MPP or L402 (0). The Enterprise API plan is public at $30 a month with 40 envelopes and $0.75 per additional envelope, and add-ons are priced per unit (20). The free sandbox gives full API access with no credit card, and the 30-day trial also needs no card per the pricing page (20). A person signs up in a browser and mints the key or registers the OAuth app in the web app (0). 0 + 20 + 20 + 0 = 40.", "b": "No x402, MPP or L402 found (0). The developers page states per-invite prices, from $2 at 500 invites to $1.20 at 5,000. The full plan table is a JavaScript page we couldn't read, so we scored between plan-only and per-unit (15). Development mode is free with up to 500 invites, and the help centre says the free trial needs no credit card (20). A person has to register in a browser and verify an email address before the first key exists (0)." }, "scores": { "a": 40, "b": 35 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Syncfusion, Inc.", "b": "airSlate, Inc.", "name": "Vendor" }, { "a": "https://api.boldsign.com/v1", "b": "https://api.signnow.com", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Pay per use", "name": "Pricing" }, { "a": "$0.25 per transaction", "b": "not published", "name": "Price for e-signatures" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under the BoldSign Terms of Use. The five official SDKs and the deprecated local MCP package on GitHub are MIT", "b": "Proprietary service under the SignNow Terms of Service. The MCP server and the SDKs on GitHub are MIT", "name": "Licence" }, { "a": "14", "b": "21", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.signnow/sn-mcp-server", "name": "MCP registry" }, { "a": "2026-10-16", "b": "2026-09-03", "name": "Last release" }, { "a": "2025-02-01", "b": "2023-03-02", "name": "Terms last updated" }, { "a": "2026-07-01", "b": "2026-08-12", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "yes", "name": "Terms restrict automated access" }, { "a": "yes", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "1 stars", "b": "8 stars, 7.7k npm/wk, 5.3k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "BoldSign scores 70.3 (BB) on agent readiness against airSlate SignNow's 66.3 (B), and leads in 5 of 7 scored categories. airSlate SignNow leads on reliability.", "question": "Which is better for AI agents, BoldSign or airSlate SignNow?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do BoldSign and airSlate SignNow need an API key?" }, { "answer": "Yes. BoldSign has a hosted endpoint at https://api.boldsign.com/v1 and airSlate SignNow at https://api.signnow.com.", "question": "Can an agent call BoldSign and airSlate SignNow without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 40 against 35", "Maintenance \u0026 community, 78 against 57" ], "also": [ "Agent-ready, a grade of BB or better", "No incidents deducted, where airSlate SignNow loses 3 points for them" ], "goodFor": "A product team embedding signing, requesting and templates at a per-envelope price with regional hosting in the US, EU, Canada or Australia, and an agent that sends from templates and tracks status through the hosted MCP server.", "slug": "boldsign", "watchFor": "API keys carry every scope and the docs say that is not customisable; only OAuth apps get narrower scopes, and there is no Documents.Read scope" }, { "aheadOn": [ "Reliability, 93 against 84" ], "also": [ "Runs on your own machine" ], "goodFor": "An agent that sends agreements from templates, embeds signing in another product or tracks invites, and teams that want per-invite pricing with a free test mode.", "slug": "signnow", "watchFor": "API keys don't expire and work for all API requests. Narrower access needs an OAuth token requested with a URL-pattern scope" } ], "history": { "boldsign": null, "signnow": [ { "causes": [ "correction", "time" ], "date": "2026-11-01", "delta": -2.3, "from": 68.6, "fromGrade": "B", "to": 66.3, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 68.5, "fromGrade": "B", "to": 68.6, "toGrade": "B" } ] }, "job": { "capability": "esign.send", "name": "E-signatures" }, "others": [ { "json": "https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-boldsign.json", "title": "Adobe Acrobat Sign vs BoldSign", "url": "https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-boldsign" }, { "json": "https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-signnow.json", "title": "Adobe Acrobat Sign vs airSlate SignNow", "url": "https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-signnow" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-documenso.json", "title": "BoldSign vs Documenso", "url": "https://www.anchorterminal.com/compare/boldsign-vs-documenso" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-docuseal.json", "title": "BoldSign vs DocuSeal", "url": "https://www.anchorterminal.com/compare/boldsign-vs-docuseal" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-docusign.json", "title": "BoldSign vs Docusign", "url": "https://www.anchorterminal.com/compare/boldsign-vs-docusign" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-dropbox-sign.json", "title": "BoldSign vs Dropbox Sign", "url": "https://www.anchorterminal.com/compare/boldsign-vs-dropbox-sign" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-pandadoc.json", "title": "BoldSign vs PandaDoc", "url": "https://www.anchorterminal.com/compare/boldsign-vs-pandadoc" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-signwell.json", "title": "BoldSign vs SignWell", "url": "https://www.anchorterminal.com/compare/boldsign-vs-signwell" }, { "json": "https://www.anchorterminal.com/compare/boldsign-vs-youtrust.json", "title": "BoldSign vs Youtrust", "url": "https://www.anchorterminal.com/compare/boldsign-vs-youtrust" }, { "json": "https://www.anchorterminal.com/compare/documenso-vs-signnow.json", "title": "Documenso vs airSlate SignNow", "url": "https://www.anchorterminal.com/compare/documenso-vs-signnow" }, { "json": "https://www.anchorterminal.com/compare/docuseal-vs-signnow.json", "title": "DocuSeal vs airSlate SignNow", "url": "https://www.anchorterminal.com/compare/docuseal-vs-signnow" }, { "json": "https://www.anchorterminal.com/compare/docusign-vs-signnow.json", "title": "Docusign vs airSlate SignNow", "url": "https://www.anchorterminal.com/compare/docusign-vs-signnow" }, { "json": "https://www.anchorterminal.com/compare/dropbox-sign-vs-signnow.json", "title": "Dropbox Sign vs airSlate SignNow", "url": "https://www.anchorterminal.com/compare/dropbox-sign-vs-signnow" }, { "json": "https://www.anchorterminal.com/compare/pandadoc-vs-signnow.json", "title": "PandaDoc vs airSlate SignNow", "url": "https://www.anchorterminal.com/compare/pandadoc-vs-signnow" }, { "json": "https://www.anchorterminal.com/compare/signnow-vs-signwell.json", "title": "airSlate SignNow vs SignWell", "url": "https://www.anchorterminal.com/compare/signnow-vs-signwell" }, { "json": "https://www.anchorterminal.com/compare/signnow-vs-youtrust.json", "title": "airSlate SignNow vs Youtrust", "url": "https://www.anchorterminal.com/compare/signnow-vs-youtrust" } ], "panel": null, "scores": [ { "boldsign": 84, "by": 9, "edge": "signnow", "key": "reliability", "name": "Reliability", "signnow": 93, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "boldsign": 85, "by": 4, "edge": "boldsign", "key": "schema", "name": "Schema \u0026 documentation", "signnow": 81, "weight": 13 }, { "boldsign": 62, "by": 4, "edge": "signnow", "key": "ergonomics", "name": "Agent ergonomics", "signnow": 66, "weight": 13 }, { "boldsign": 63, "by": 1, "edge": "boldsign", "key": "security", "name": "Security \u0026 auth", "signnow": 62, "weight": 14 }, { "boldsign": 40, "by": 5, "edge": "boldsign", "key": "payments", "name": "Payments \u0026 pricing", "signnow": 35, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "boldsign": 78, "by": 21, "edge": "boldsign", "key": "maintenance", "name": "Maintenance \u0026 community", "signnow": 57, "weight": 7 }, { "boldsign": 77, "by": 2, "edge": "boldsign", "key": "transparency", "name": "Transparency \u0026 trust", "signnow": 75, "weight": 7 } ], "summary": "BoldSign scores 70.3 (BB) on agent readiness against airSlate SignNow's 66.3 (B), and leads in 5 of 7 scored categories. airSlate SignNow leads on reliability. Both do e-signatures.", "tasks": null, "tutorials": [], "verdicts": { "boldsign": "A public OpenAPI file, llms.txt, 20 OAuth scopes, published rate limits, a free sandbox and a clean 90-day status history. API keys carry every scope, there are no idempotency keys, the 2,000-an-hour account limit is low for bulk work, and the hosted MCP server's 14 tools include sending and revoking with no confirmation step of their own.", "signnow": "The REST API has a public OpenAPI 3.0 spec with 354 operations, Markdown docs, a free Development mode with 500 invites and a hosted MCP server with OAuth. API keys don't expire and carry full account access, no idempotency keys were found, and the MCP server's GitHub repository was archived when checked on 7 October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/boldsign-vs-signnow", "json": "https://www.anchorterminal.com/compare/boldsign-vs-signnow.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/boldsign-vs-signnow.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/boldsign-vs-signnow.min.md" }, "markdown": "BoldSign scores 70.3 (BB) on agent readiness against airSlate SignNow's 66.3 (B), and leads in 5 of 7 scored categories. airSlate SignNow leads on reliability. Both do e-signatures.\n\n- BoldSign: grade BB, 70.3/100, rank #190 of 1349. Markdown https://www.anchorterminal.com/tools/boldsign.md · JSON https://www.anchorterminal.com/api/v1/tools/boldsign.json\n- airSlate SignNow: grade B, 66.3/100, rank #340 of 1349. Markdown https://www.anchorterminal.com/tools/signnow.md · JSON https://www.anchorterminal.com/api/v1/tools/signnow.json\n- Best contract, proposal and e-signature APIs for AI agents: https://www.anchorterminal.com/best/e-signatures/index.md\n- All 45 e-signatures comparisons: https://www.anchorterminal.com/compare/e-signatures/index.md\n\n## Which one, for what\n\n### BoldSign (BB)\n\nGood for: A product team embedding signing, requesting and templates at a per-envelope price with regional hosting in the US, EU, Canada or Australia, and an agent that sends from templates and tracks status through the hosted MCP server.\n\nAhead on:\n- Payments \u0026 pricing, 40 against 35\n- Maintenance \u0026 community, 78 against 57\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No incidents deducted, where airSlate SignNow loses 3 points for them\n\nWatch for: API keys carry every scope and the docs say that is not customisable; only OAuth apps get narrower scopes, and there is no Documents.Read scope\n\n### airSlate SignNow (B)\n\nGood for: An agent that sends agreements from templates, embeds signing in another product or tracks invites, and teams that want per-invite pricing with a free test mode.\n\nAhead on:\n- Reliability, 93 against 84\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: API keys don't expire and work for all API requests. Narrower access needs an OAuth token requested with a URL-pattern scope\n\n\n## Why the edge\n\n### Maintenance \u0026 community: BoldSign +21\n\n- BoldSign (78): Read as a closed service. The API changelog's newest entry is 16 October 2026, and the PHP SDK repository was pushed the same day, Java and Python on 13 October (30). Changelog entries on 13 August, 19 August, 7 September, 23 September, 8 October and 16 October 2026 (20). Support site, knowledge base and support@boldsign.com, with a public changelog. GitHub issues on the SDK repositories were not read (8 of 15). Five official SDKs, Node at 3.3.4 since August 2026. The hosted MCP server is not in the official MCP registry (15). The Node SDK clone shows no CI workflow and the deprecated MCP package stopped at 0.0.5 (5 of 10). 30 + 20 + 8 + 15 + 5 = 78.\n- airSlate SignNow (57): The API changelog's newest entry is still September 2026, dated by month only, and the PHP SDK v3.5.4 (3 September 2026, a code change) is 59 days old, so both sit in the 90-day band (20). In the 90 days to 1 November the changelog has entries for August and September, and v3.5.4 counts half as an SDK release, which falls short of three, so half the line (10). Closed service with a monthly changelog and API support at api@signnow.com. The MCP repository that the docs name for issue reports was archived when checked on 7 October and has no commit after 27 July (8). SDKs for five languages, with PHP in September 2026, Python in April and Node in March per the 7 October check. The official MCP registry still lists io.github.signnow/sn-mcp-server at 0.3.1 while the newest tag is v3.1.0 (13). The MCP repository has CI with ruff, mypy and pytest and 60 test files, and it was archived when checked on 7 October (6).\n\n### Reliability: airSlate SignNow +9\n\n- BoldSign (84): Read with the hosted lines and scored on the REST API v1, the surface the SDKs and the hosted MCP server call. status.boldsign.com on Atlassian Statuspage has Web App and API components for Global, Europe, Canada and Australia plus Docs, with 90-day uptime and an incident history (20). The history feed, read on 3 November 2026, lists four one-hour scheduled maintenances between 19 and 27 September and no incident after a 20-minute partial disruption on 21 July 2026, so the 90 days from 5 August are clean (30). Rate limits are published per account, 2,000 requests an hour live and 50 an hour in the sandbox (15). The rate-limit page says 429 is returned with messages and usage is tracked in response headers, and the guide recommends webhooks over polling. No Retry-After is documented and there are no idempotency keys (6 of 15). No SLA document was found. security.txt advertises a 99.999 per cent uptime SLA, the terms disclaim uninterrupted service and refer to a support SLA available on request (3 of 10). v1 is the stable version with beta endpoints under v1-beta (10). 20 + 30 + 15 + 6 + 3 + 10 = 84.\n- airSlate SignNow (93): Graded as a hosted API. Statuspage at status.signnow.com with six components including API (20). The history feed shows one incident in the 90 days to 1 November, a minor one on 3 September 2026 that made the SignNow University site unavailable for eight minutes, and none on the API component. The 17 October maintenance window of up to 15 minutes was announced on 2 October (30). Limits are published with numbers, 500 requests an hour in Development and 1,000 in Live (15). 429 is documented with X-RateLimit-Limit, Remaining and Reset headers and advice to back off exponentially. No Retry-After header and no idempotency key were found, and sending an invite is a charged write (8). The SLA commits to commercially reasonable efforts for 99.9 per cent monthly uptime with credits of 10 or 30 per cent (10). The REST API is generally available (10).\n\n### Payments \u0026 pricing: BoldSign +5\n\n- BoldSign (40): Read with the hosted rubric. No x402, MPP or L402 (0). The Enterprise API plan is public at $30 a month with 40 envelopes and $0.75 per additional envelope, and add-ons are priced per unit (20). The free sandbox gives full API access with no credit card, and the 30-day trial also needs no card per the pricing page (20). A person signs up in a browser and mints the key or registers the OAuth app in the web app (0). 0 + 20 + 20 + 0 = 40.\n- airSlate SignNow (35): No x402, MPP or L402 found (0). The developers page states per-invite prices, from $2 at 500 invites to $1.20 at 5,000. The full plan table is a JavaScript page we couldn't read, so we scored between plan-only and per-unit (15). Development mode is free with up to 500 invites, and the help centre says the free trial needs no credit card (20). A person has to register in a browser and verify an email address before the first key exists (0).\n\n## Score by category\n\n| Category | Weight | BoldSign | airSlate SignNow | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 84 | 93 | airSlate SignNow +9 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 81 | BoldSign +4 |\n| Agent ergonomics | 13% (16.2 this run) | 62 | 66 | airSlate SignNow +4 |\n| Security \u0026 auth | 14% (17.5 this run) | 63 | 62 | BoldSign +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 35 | BoldSign +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 57 | BoldSign +21 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 77 | 75 | BoldSign +2 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **70.3 · BB** | **66.3 · B** | |\n\n## Facts side by side\n\n| Fact | BoldSign | airSlate SignNow |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Syncfusion, Inc. | airSlate, Inc. |\n| Hosted endpoint | `https://api.boldsign.com/v1` | `https://api.signnow.com` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Pay per use |\n| Price for e-signatures | $0.25 per transaction | not published |\n| x402 | no | no |\n| Licence | Proprietary hosted service under the BoldSign Terms of Use. The five official SDKs and the deprecated local MCP package on GitHub are MIT | Proprietary service under the SignNow Terms of Service. The MCP server and the SDKs on GitHub are MIT |\n| Tools exposed | 14 | 21 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.signnow/sn-mcp-server` |\n| Last release | 2026-10-16 | 2026-09-03 |\n| Terms last updated | 2025-02-01 | 2023-03-02 |\n| Privacy policy last updated | 2026-07-01 | 2026-08-12 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | yes |\n| Terms restrict benchmarking | yes | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | 1 stars | 8 stars, 7.7k npm/wk, 5.3k PyPI/wk |\n| Agent reviews | none | 3/5 (4) |\n\n## How the scores have moved\n\n### BoldSign\n\nNo score change since it was listed.\n\n### airSlate SignNow\n\n- -2.3 on 1 November 2026: correction, time\n- +0.1 on 27 October 2026: checklist\n\n## Verdicts\n\n**BoldSign.** A public OpenAPI file, llms.txt, 20 OAuth scopes, published rate limits, a free sandbox and a clean 90-day status history. API keys carry every scope, there are no idempotency keys, the 2,000-an-hour account limit is low for bulk work, and the hosted MCP server's 14 tools include sending and revoking with no confirmation step of their own.\n\n**airSlate SignNow.** The REST API has a public OpenAPI 3.0 spec with 354 operations, Markdown docs, a free Development mode with 500 invites and a hosted MCP server with OAuth. API keys don't expire and carry full account access, no idempotency keys were found, and the MCP server's GitHub repository was archived when checked on 7 October 2026.\n\n## Before you call either\n\n### BoldSign\n\n1. Send `X-API-KEY: $BOLDSIGN_API_KEY` to the regional base URL (api.boldsign.com, api-eu, api-ca or api-au); a key from one region fails on another, and the MCP endpoint must match too\n2. Build against a Sandbox key first. Sandbox documents are watermarked and deleted after 14 days, and the sandbox allows only 50 requests an hour\n3. Stay under 2,000 requests an hour per account in production and use webhooks instead of polling `document/properties`; on a 429 wait for the window to reset\n4. Don't retry a timed-out `document/send` blindly. There is no idempotency key, so list documents by title or search before sending again\n5. Verify `X-BoldSign-Signature` (HMAC-SHA256 with the endpoint secret) on every webhook before acting on its payload\n6. On the MCP server, start with `list_templates` and `get_document_properties`, and confirm with the person before `send_document_from_template`, `send_reminder_for_document_sign` or `revoke_document`\n\n### airSlate SignNow\n\n1. Call https://api.signnow.com with `Authorization: Bearer \u003cAPI key or access token\u003e`. Development and Live share this host, and Development documents carry a watermark\n2. Request OAuth tokens with a narrow `scope` such as `document/* GET/user`. The default `*` grants every API action\n3. Read `X-RateLimit-Remaining` and `X-RateLimit-Reset` on each response. The limit is 500 requests an hour in Development and 1,000 in Live, and 429 has no Retry-After\n4. Check invite status before resending. No idempotency key exists, and a repeated invite call counts as another charged invite\n5. Set `secret_key` when creating an event subscription and verify `X-SignNow-Signature` (HMAC SHA-256 of the body) on every callback\n\n## Questions\n\n### Which is better for AI agents, BoldSign or airSlate SignNow?\n\nBoldSign scores 70.3 (BB) on agent readiness against airSlate SignNow's 66.3 (B), and leads in 5 of 7 scored categories. airSlate SignNow leads on reliability.\n\n### Do BoldSign and airSlate SignNow need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call BoldSign and airSlate SignNow without installing anything?\n\nYes. BoldSign has a hosted endpoint at https://api.boldsign.com/v1 and airSlate SignNow at https://api.signnow.com.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/boldsign-vs-signnow.json, and with the fewest tokens: https://www.anchorterminal.com/compare/boldsign-vs-signnow.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"boldsign\", \"b\": \"signnow\"}`. From a terminal: `anchor compare boldsign signnow`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/boldsign.json and https://www.anchorterminal.com/api/v1/tools/signnow.json\n\n## Other comparisons with BoldSign or airSlate SignNow\n\n- [Adobe Acrobat Sign vs BoldSign](https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-boldsign.md)\n- [Adobe Acrobat Sign vs airSlate SignNow](https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-signnow.md)\n- [BoldSign vs Documenso](https://www.anchorterminal.com/compare/boldsign-vs-documenso.md)\n- [BoldSign vs DocuSeal](https://www.anchorterminal.com/compare/boldsign-vs-docuseal.md)\n- [BoldSign vs Docusign](https://www.anchorterminal.com/compare/boldsign-vs-docusign.md)\n- [BoldSign vs Dropbox Sign](https://www.anchorterminal.com/compare/boldsign-vs-dropbox-sign.md)\n- [BoldSign vs PandaDoc](https://www.anchorterminal.com/compare/boldsign-vs-pandadoc.md)\n- [BoldSign vs SignWell](https://www.anchorterminal.com/compare/boldsign-vs-signwell.md)\n- [BoldSign vs Youtrust](https://www.anchorterminal.com/compare/boldsign-vs-youtrust.md)\n- [Documenso vs airSlate SignNow](https://www.anchorterminal.com/compare/documenso-vs-signnow.md)\n- [DocuSeal vs airSlate SignNow](https://www.anchorterminal.com/compare/docuseal-vs-signnow.md)\n- [Docusign vs airSlate SignNow](https://www.anchorterminal.com/compare/docusign-vs-signnow.md)\n- [Dropbox Sign vs airSlate SignNow](https://www.anchorterminal.com/compare/dropbox-sign-vs-signnow.md)\n- [PandaDoc vs airSlate SignNow](https://www.anchorterminal.com/compare/pandadoc-vs-signnow.md)\n- [airSlate SignNow vs SignWell](https://www.anchorterminal.com/compare/signnow-vs-signwell.md)\n- [airSlate SignNow vs Youtrust](https://www.anchorterminal.com/compare/signnow-vs-youtrust.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "BoldSign vs airSlate SignNow", "url": "" } ], "description": "BoldSign scores 70.3 (BB) to airSlate SignNow's 66.3 (B) for e-signatures. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "BoldSign BB 70.3", "airSlate SignNow B 66.3", "scores" ], "h1": "BoldSign vs airSlate SignNow", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/boldsign-vs-signnow", "published": "2026-10-01", "section": "tools", "title": "BoldSign vs airSlate SignNow for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-04", "url": "https://www.anchorterminal.com/compare/boldsign-vs-signnow" }, "tokens": { "markdown": 3700, "slim": 1930 }, "version": 1 }